BD Software Distribution Pvt. Ltd.
Privacy Notice (Under the Digital Personal Data Protection Act, 2023)
Last Updated: April 2026
- Introduction
BD Software Distribution Pvt. Ltd. (“BD Software”, “we”, “our”, “us”) is a technology distributor and reseller headquartered in Navi Mumbai, Maharashtra, India, with operations across India.
This Privacy Notice is issued in accordance with the Digital Personal Data Protection Act, 2023 (India) and describes how we collect, process, store, use, and protect your Personal Data.
Under the DPDP Act:
- You are referred to as the Data Principal
- BD Software acts as a Data Fiduciary
- In certain cases, we may act as a Data Processor on behalf of enterprise customers
This Notice applies to Personal Data collected through:
- Our website (https://bdsoft.in)
- Business engagements
- Events and training programs
- Vendor and partner interactions
- Marketing communications
- Offline communications
This Notice does not apply were BD Software processes data strictly on behalf of enterprise customers under separate contractual arrangements.
- Categories of Personal Data We Collect
We collect only such Personal Data as is necessary for lawful business purposes.
This may include:
- Identity details (name, company name, designation)
- Contact details (email address, phone number, billing/shipping address)
- Financial information (bank details, payment information)
- Transaction history
- Technical data (IP address, browser type, device information)
- Usage data (website interaction data)
- Professional information (organization, job title)
- Sensitive personal data such as government-issued ID numbers or financial information, where required
We do not knowingly collect Personal Data of children under 18 years of age.
- Purpose of Processing
We process Personal Data for the following lawful purposes:
- To provide and manage products and services
- To register and manage accounts
- To process transactions and payments
- To deliver cybersecurity, cloud, and IT solutions
- To conduct credit verification and fraud prevention checks
- To respond to inquiries and provide customer support
- To comply with legal obligations
- To improve website functionality and service offerings
- To send marketing communications (with consent)
We process Personal Data only:
- With your consent; or
- For legitimate uses permitted under the DPDP Act (e.g., compliance with law, fraud prevention, contractual necessity).
- Notice at Collection
At the time of collecting your Personal Data, we provide:
- The categories of Personal Data collected
- The purpose of processing
- How to exercise your rights
- Contact details for grievance redressal
If Personal Data is collected from third parties, we ensure lawful processing in accordance with applicable law.
- Consent
Where required under the DPDP Act:
- Consent will be free, specific, informed, unconditional, and unambiguous.
- You may withdraw your consent at any time.
- Withdrawal of consent will not affect prior lawful processing.
For marketing communications, you may unsubscribe using the link provided in our emails or by contacting us.
Where consent is not required under applicable law, BD Software may process Personal Data for certain legitimate uses permitted under Section 7 of the Digital Personal Data Protection Act, 2023, including compliance with legal obligations, responding to medical emergencies, employment-related purposes, prevention and detection of fraud, network and information security, and other lawful purposes recognized under applicable law.
Withdrawal of consent may affect BD Software’s ability to provide certain services, access platforms, process transactions, or maintain ongoing business relationships where such processing is necessary.
- Sharing of Personal Data
We may share Personal Data with:
- Technology vendors whose products we distribute
- Resellers and channel partners
- Service providers (payment processors, hosting providers, analytics providers)
- Law enforcement or regulatory authorities, where legally required
- Affiliates and subsidiaries within India
- Potential buyers in case of merger or acquisition
We ensure appropriate contractual safeguards when sharing Personal Data.
We do not sell Personal Data.
Data Principals are requested to provide accurate, complete, and up-to-date Personal Data and promptly notify BD Software of any changes
- Cookies and Tracking Technologies
Our website uses cookies and similar technologies for:
- Website functionality
- Analytics and performance monitoring
- Security
- Personalization
You may manage cookie preferences through browser settings or cookie banners. Non-essential cookies and analytics technologies maybe deployed only after obtaining complaints and Data Principal requests in accordance with applicable law.
- Data Security
We implement reasonable security safeguards, including:
- Access controls
- Network segmentation
- Encryption measures
- Internal data protection policies
- Employee confidentiality and training programs
While we take reasonable measures, no system can guarantee absolute security.
In the event of a Personal Data breach, we will notify affected individuals and the appropriate authority as required under law.
In the event of a Personal Data breach, BD Software shall take reasonable measures to contain, assess, investigate, and remediate the incident and provide notifications to affected Data Principals and competent authorities in accordance with applicable law
- Data Retention
We retain Personal Data only for as long as necessary for:
- Business operations
- Legal compliance (e.g., tax and GST regulations)
- Contractual obligations
- Dispute resolution
After the retention period, data will be securely deleted or anonymized.
Moreover, BD Software does not knowingly process Personal Data of children (individuals under 18 years of age). Where processing of children’s Personal Data becomes necessary, verifiable consent of the parent or lawful guardian shall be obtained in accordance with applicable law. BD Software does not undertake tracking, behavioural monitoring, targeted advertising, or processing likely to cause detrimental effects on children
- International Data Transfers
Personal Data may be processed in India or other jurisdictions where our service providers operate.
Such transfers are conducted in accordance with applicable Indian law and government notifications under the DPDP Act.
- Your Rights Under the DPDP Act
As a Data Principal, you have the right to:
- Request access to your Personal Data
- Request correction of inaccurate or misleading data
- Request erasure of Personal Data (subject to legal obligations)
- Withdraw consent
- Nominate another individual to exercise your rights in case of incapacity or death
- Seek grievance redressal
If you are dissatisfied with our response, you may approach the Data Protection Board of India once constituted under the DPDP Act.
- Grievance Redressal
BD Software shall designate a Grievance Officer responsible for addressing privacy-related complaints and Data Principal requests in accordance with applicable law. For any privacy-related concerns or to exercise your rights, please contact:
BD Software Distribution Pvt. Ltd.
Basavaraj Vastrad
Email: info@bdsoft.in
We will respond within the timelines prescribed under applicable law.
- Updates to This Notice
We may update this Privacy Notice from time to time to reflect changes in law or business practices. The updated version will be published on our website with the revised effective date.
- Third Party Processor Obligations
Third-party processors engaged by BD Software shall process Personal Data only pursuant to contractual obligations requiring confidentiality, implementation of reasonable security safeguards, processing limitations, and compliance with applicable data protection laws.
- Cross Border Data Transfer
BD Software shall ensure that cross-border transfers of Personal Data are undertaken only to jurisdictions permitted under applicable Indian law and subject to reasonable contractual and technical safeguards.
- Automated Decision Making
BD Software does not undertake solely automated decision-making producing legal or similarly significant effects on individuals unless permitted under applicable law.
- Business Contact Data
Where Personal Data relates to business representatives, employees, channel partners, or vendor personnel, such data shall be processed for business relationship management, account administration, compliance, operational communications, and related legitimate business purposes.